Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/GmyIl0cO6fzjbdTS1sPC1AN3qtA.roa
File: GmyIl0cO6fzjbdTS1sPC1AN3qtA.roa (raw, json)
Hash identifier: O2BUdCE3guspTR+Vqj5BE9yYL22kGcd2kiPaXZgK8PE=
Subject key identifier: 1A:6C:88:97:47:0E:E9:FC:E3:6D:D4:D2:D6:C3:C2:D4:03:77:AA:D0
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 15BD6B89
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/GmyIl0cO6fzjbdTS1sPC1AN3qtA.roa
Signing time: Wed 30 Mar 2022 11:11:18 +0000
ROA not before: Wed 30 Mar 2022 11:11:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8641
IP address blocks: 213.208.160.0/21 maxlen: 21
213.208.168.0/23 maxlen: 23
213.208.170.0/24 maxlen: 24
213.208.172.0/22 maxlen: 22
213.208.176.0/21 maxlen: 21
213.208.186.0/23 maxlen: 23
213.208.184.0/24 maxlen: 24
213.208.188.0/22 maxlen: 22
81.26.144.0/21 maxlen: 21
81.26.144.0/24 maxlen: 24
81.26.152.0/22 maxlen: 22
185.106.107.0/24 maxlen: 24
77.94.162.0/24 maxlen: 24
77.94.160.0/19 maxlen: 19
84.47.128.0/22 maxlen: 22
77.94.175.0/24 maxlen: 24
84.47.134.0/23 maxlen: 23
84.47.136.0/24 maxlen: 24
84.47.140.0/22 maxlen: 22
84.47.144.0/23 maxlen: 23
84.47.152.0/23 maxlen: 23
85.91.96.0/21 maxlen: 21
84.47.147.0/24 maxlen: 24
77.94.189.0/24 maxlen: 24
84.47.148.0/22 maxlen: 22
84.47.156.0/22 maxlen: 22
84.47.160.0/22 maxlen: 22
85.91.112.0/22 maxlen: 22
84.47.164.0/23 maxlen: 23
84.47.168.0/21 maxlen: 21
85.91.118.0/23 maxlen: 23
213.135.64.0/22 maxlen: 22
213.135.70.0/23 maxlen: 23
85.91.122.0/24 maxlen: 24
84.47.176.0/24 maxlen: 24
213.135.69.0/24 maxlen: 24
84.47.177.0/24 maxlen: 24
84.47.176.0/23 maxlen: 23
85.91.120.0/23 maxlen: 23
84.47.181.0/24 maxlen: 24
213.135.72.0/23 maxlen: 23
84.47.182.0/23 maxlen: 23
84.47.186.0/23 maxlen: 23
213.135.77.0/24 maxlen: 24
213.135.80.0/24 maxlen: 24
84.47.190.0/23 maxlen: 23
213.135.79.0/24 maxlen: 24
213.135.80.0/21 maxlen: 21
213.135.88.0/22 maxlen: 22
2a02:bc8::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364735369 (0x15bd6b89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Mar 30 11:11:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a6c8897470ee9fce36dd4d2d6c3c2d40377aad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:cb:30:6f:69:ad:2b:d8:cc:f6:1d:84:cc:
79:8c:8a:c6:5a:da:07:07:cd:79:4c:35:f8:7f:8f:
7d:6f:3a:6a:9a:b4:99:f0:cc:54:a5:5b:3b:09:94:
08:40:05:07:cc:3e:b1:63:5a:d9:62:81:fb:73:88:
9f:c3:63:f2:de:cf:08:80:ce:f4:eb:3c:a0:27:cf:
55:b0:30:0b:f4:d6:4b:01:b8:7e:c0:ad:5a:66:a2:
f7:2f:f6:5c:71:98:19:4a:9b:e5:94:c8:d9:04:6a:
28:d2:2c:46:8b:c1:90:9e:27:73:bc:67:76:01:69:
e6:eb:4a:49:ec:8a:02:29:1e:51:e8:5c:db:81:c4:
d7:dd:c1:85:a4:38:20:1a:f7:61:a3:ec:6e:96:7a:
ee:52:07:54:10:87:ae:f8:7a:a6:72:3b:cc:22:d2:
4c:b7:96:1f:a4:64:bc:53:87:3a:43:13:08:27:e5:
ab:d0:59:c3:0c:b7:e7:77:b0:79:86:c8:24:36:66:
b7:0c:6d:1c:ed:cd:1b:1f:7c:ce:81:dd:54:f4:15:
11:7d:7b:08:dd:8f:4f:2f:6c:59:12:08:20:8f:04:
7c:4d:61:b9:65:2f:2b:95:8c:2a:36:58:1b:2f:a9:
82:2b:de:99:ea:85:b4:76:bb:96:0e:aa:84:6e:b6:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6C:88:97:47:0E:E9:FC:E3:6D:D4:D2:D6:C3:C2:D4:03:77:AA:D0
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/GmyIl0cO6fzjbdTS1sPC1AN3qtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.94.160.0/19
81.26.144.0-81.26.155.255
84.47.128.0/22
84.47.134.0-84.47.136.255
84.47.140.0-84.47.145.255
84.47.147.0-84.47.153.255
84.47.156.0-84.47.165.255
84.47.168.0-84.47.177.255
84.47.181.0-84.47.183.255
84.47.186.0/23
84.47.190.0/23
85.91.96.0/21
85.91.112.0/22
85.91.118.0-85.91.122.255
185.106.107.0/24
213.135.64.0/22
213.135.69.0-213.135.73.255
213.135.77.0/24
213.135.79.0-213.135.91.255
213.208.160.0-213.208.170.255
213.208.172.0-213.208.184.255
213.208.186.0-213.208.191.255
IPv6:
2a02:bc8::/29
Signature Algorithm: sha256WithRSAEncryption
73:e1:ed:70:0a:bb:d3:85:bc:28:5c:52:15:9a:80:c2:96:55:
19:8d:b8:3a:b5:3c:2f:d8:91:c3:75:04:ae:bf:27:b8:49:66:
94:44:49:5c:8c:13:b6:4d:56:8d:08:91:ae:c1:25:41:eb:d7:
59:26:38:3b:91:a0:f3:01:67:4c:b7:6e:e3:cd:cf:ea:14:93:
d1:c0:47:58:69:45:13:60:d1:28:44:4c:ea:a8:d1:46:29:7a:
11:e6:86:02:40:98:51:b6:f1:5f:e8:e8:cd:1c:c7:28:92:51:
77:50:c6:0f:5c:3d:35:0a:82:d6:86:b7:3d:2b:f0:28:54:d9:
dc:7b:14:f9:50:95:ee:8c:65:b3:4d:68:9e:f7:2d:5e:d9:e0:
5b:61:8f:36:58:13:7a:10:d5:bd:d2:fc:0f:3d:5c:81:ef:ba:
8e:6d:19:a4:da:2a:03:7b:c3:1e:9c:fa:a9:bf:1d:10:be:ea:
cd:53:18:f5:54:f3:27:c2:8f:45:12:d3:88:86:44:26:1e:de:
23:0e:dc:21:67:d2:ac:a2:aa:79:79:dc:30:2c:a6:95:e5:71:
d7:8e:6c:92:70:29:f1:c6:ca:54:a2:4c:97:66:81:61:80:c7:
cd:40:48:c9:a9:23:63:cd:ea:10:ec:d1:0e:5b:39:a9:70:54:
41:43:6a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:05 2024 by rpki-client on console-ams.rpki-client.org